pix515 multiple interface configuration

teteja1974 — Fri, 21 Feb 2020 09:19:01 GMT

Hi, actually i have this scenario:pix 515e version 6.2(2) with on board

6 interfaces but now configure with 3 interfaces (in this mode):

INTERNET ROUTER (ETH 172.17.10.1)

I(OUTSIDE - 172.17.10.2)

PIX -INTF2--.2--------------(172.17.12.0/29)--------.3(PARTNER)

INSIDE (172.17.8.1/23)

MY LAN

then 3 interfaces configuration without NAT.

there are the static routes:

route outside 0.0.0.0 0.0.0.0 172.17.10.1 1 route intf2 192.168.54.209 255.255.255.255 172.17.12.3 1 route intf2 192.168.129.0 255.255.255.0 172.17.12.3 1 route intf2 192.168.131.0 255.255.255.0 172.17.12.3 1 route intf2 192.168.134.0 255.255.255.0 172.17.12.3 1

traffic outcomes from my default gateway coming out from 172.17.10.1, traffic out/in from /to network 192.168.x.x/16 is forwarded from intf2 this scenario works well.

but tomorrow i must add new two routers on 2 new interfaces and i would have this new scenario:

ISP ROUTER (.3 ) ISP ROUTER (.1)

\ I

172.17.14.0/30 \ I 172.17.10.0/30

\ I

INTF3(.2) \ I(OUTSIDE - .2)

(PARTNER)(.3)(172.17.13.0/29)INTF5(.2)PIX-INTF2(.2)(172.17.12.0/29)(.3)(PARTNER)

INSIDE (172.17.8.1/23)

MY LAN

and this would have to be future situation:

the traffic that outcomes from 172.17.8.1/25 coming out from

172.17.10.1

the traffic that outcomes from 172.17.8.128/25 coming out from a new interface 172.17.14.3 except traffic out/in from 192.168.0.0/16 coming out from 172.17.12.3 traffic that outcomes from 172.17.9.1/25 coming out from interface

172.17.14.3 except traffic out/in 192.168.0.0/16 coming out from

172.17.13.3

traffic outcomes from 172.17.9.128/25 coming out from 172.17.10.1

is it possible this scenario?

can you help me with this configuration?obbligatory i use NAT?

sorry for my bad english...

thanks in advance

Matt

topic pix515 multiple interface configuration in Network Security

pix515 multiple interface configuration

Re: pix515 multiple interface configuration